summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* s4-torture: Test LookupSids3/LookupNames4 over np and tcpip.Andreas Schneider2012-07-061-8/+26
|
* s4-torture: Make sure lsa_OpenPolicy2 fails over TCP/IP.Andreas Schneider2012-07-062-8/+16
|
* s4-torture: Make sure lsa_OpenPolicy fails over TCP/IP.Andreas Schneider2012-07-061-9/+20
|
* s4-torture: Make sure ncacn_np tests are only called over the a pipe.Andreas Schneider2012-07-062-1/+43
|
* s4-torture: Test LookupSids3 and LookupNames4 only over tcpip.Andreas Schneider2012-07-061-13/+36
| | | | | LookupSids3 and LookupNames4 are only available over tcpip and MUST fail over named pipes.
* s4-torture: Use test_LookupSids3 function.Andreas Schneider2012-07-061-32/+1
|
* s4-torture: Fix build warnings in lsa test.Andreas Schneider2012-07-061-10/+2
|
* s4-classicupgrade: Demote any other 'BDC' accounts back to a member server ↵Andrew Bartlett2012-07-061-2/+12
| | | | | | | | | | | | during upgrade This makes it clear that they cannot be a DC until they are upgraded with samba-tool domain dcpromo. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Jul 6 09:59:13 CEST 2012 on sn-devel-104
* s4-selftest: Test samba-tool domain dcpromoAndrew Bartlett2012-07-061-1/+2
| | | | | | | This needs a new environment to test it properly. This requires a raise in the number of socket wrapper interfaces. Andrew Bartlett
* s4-samba-tool: Provide a samba-tool domain dcpromo that upgrades a member to ↵Andrew Bartlett2012-07-062-10/+121
| | | | | | | | | | | a DC This command is like dcpromo in that it upgrades the existing workstation account to be a domain controller. The SID (and therefore any file ownerships) is preserved. Andrew Bartlett
* s4-dsdb: Give a much better error message when parentGUID generation failsAndrew Bartlett2012-07-061-3/+3
|
* s4-dsdb: Use parent_object_guid to find the correct parent for new objectsAndrew Bartlett2012-07-063-1/+129
| | | | | | | | This allows the parent to be renmaed while a new object is added on another replica. This rename may also be a delete, in which case we must move it to lostandfound. Andrew Bartlett
* s4/heimdal: fix make-proto.pl with perl 5.16Björn Jacke2012-07-041-3/+2
| | | | | | | Thanks to Torsten Kurbad. This fixes #9025. Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Wed Jul 4 13:51:07 CEST 2012 on sn-devel-104
* samba-tool: gpo: Update copyrightAmitay Isaacs2012-07-031-1/+1
| | | | | Autobuild-User(master): Amitay Isaacs <amitay@samba.org> Autobuild-Date(master): Tue Jul 3 09:10:21 CEST 2012 on sn-devel-104
* samba-tool: gpo: Improve error messagesAmitay Isaacs2012-07-031-26/+28
| | | | Signed-off-by: Amitay Isaacs <amitay@gmail.com>
* samba-tool: gpo: Add del subcommand to delete GPOAmitay Isaacs2012-07-031-0/+79
| | | | Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
* samba-tool: gpo: Add listcontainers subcommand to list containers using ↵Amitay Isaacs2012-07-031-0/+37
| | | | | | given GPO Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
* samba-tool: gpo: Use utility function dc_url() to set the connection urlAmitay Isaacs2012-07-031-9/+18
| | | | | | In create and fetch subcommands, we also need to know DC hostname. So first find a DC and use DC hostname to construct connection url. If ldap:// url is specified with -H, then use that to construct DC hostname.
* samba-tool: gpo: Refactor code using utility functionsAmitay Isaacs2012-07-031-40/+8
|
* samba-tool: gpo: Add utility functions get_gpo_containers and del_gpo_linkAmitay Isaacs2012-07-031-0/+50
| | | | Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch
* s4-pysmb: Add deltree() method to remove directory and its contentsAmitay Isaacs2012-07-031-0/+25
| | | | Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
* samba-tool: Fix indentationAmitay Isaacs2012-07-032-4/+4
| | | | Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
* samba-tool: gpo: Use gpo (id) instead of gpo_dn (DN)Amitay Isaacs2012-07-031-3/+3
| | | | Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
* samba-tool: gpo: Correct the attribute name from gPlink to gPLinkAmitay Isaacs2012-07-031-3/+3
| | | | Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
* samba-tool: gpo: Fix policy DNAmitay Isaacs2012-07-031-1/+1
| | | | Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
* s4-dns: Remove refernece to BIND 9.7 supporting GSS-TSIGAndrew Bartlett2012-07-031-1/+1
| | | | | | This support is too painful to use. Andrew Bartlett
* s4-dns: Remove dynamic DNS instructions for bind 9.7Andrew Bartlett2012-07-031-22/+1
| | | | | | | | This version of BIND only ever caused pain when trying to do dynamic DNS. If users are using this version, simply treat it as a static server. Andrew Bartlett
* auth: Remove .get_challenge (only used for security=server)Andrew Bartlett2012-07-037-97/+0
| | | | | | | | | | | | | With NTLMSSP, for NTLM2 we need to be able to set the effective challenge, so if we ever did use a module that needed this functionlity, we would downgrade to just NTLM. Now that security=server has been removed, we have no such module. This will make it easier to make the auth subsystem async, as we will not need to consider making .get_challenge async. Andrew Bartlett
* s4-torture: more printf removal from samlogon torture test.Günther Deschner2012-07-021-29/+25
| | | | | | | Guenther Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Mon Jul 2 17:19:55 CEST 2012 on sn-devel-104
* Replace all uses of setXX[ug]id() and setgroups with samba_setXX[ug]id() calls.Jeremy Allison2012-06-282-5/+9
| | | | | | Will allow thread-specific credentials to be added by modifying the central definitions. Deliberately left the setXX[ug]id() call in popt as this is not used in Samba.
* selftest: run pdbtest against s3dc as wellAndrew Bartlett2012-06-281-1/+1
| | | | | | | | | | | | This validates the password expiry, account disable in the s3 auth code and the save/restore of values in tdbsam. It also provides the first test of some net sam set subcommands. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Jun 28 20:39:38 CEST 2012 on sn-devel-104
* selftest: use a loop rather than declare tests for both dc and s3dcAndrew Bartlett2012-06-281-16/+16
|
* s4-torture: fix typo in samlogon test.Günther Deschner2012-06-281-1/+1
| | | | | | | Guenther Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Thu Jun 28 18:43:46 CEST 2012 on sn-devel-104
* s4-torture: use torture context for printing debug output.Günther Deschner2012-06-281-111/+97
| | | | Guenther
* source4/smbd/pidfile: don't panic if pid file is corrupt.Rusty Russell2012-06-281-0/+3
| | | | | | | | | | | | | | In particular, on a virtual machine after a forced reboot, it contained "Ille" instead of a valid PID. Given it was the right length, I'm assuming it was filesystem corruption. process_exists_by_pid() then panics, when given a pid < 1. Reported-by: lostogre on #samba-technical Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Autobuild-User(master): Rusty Russell <rusty@rustcorp.com.au> Autobuild-Date(master): Thu Jun 28 05:19:24 CEST 2012 on sn-devel-104
* s4-selftest: expand passdb testingAndrew Bartlett2012-06-271-0/+1
| | | | This tests pdb_samba4 in the first instance
* s4-dsdb when setting DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OID make it ↵Andrew Bartlett2012-06-271-1/+7
| | | | non-critical
* s4-dsdb: Remove hooks for non-directory password handlingAndrew Bartlett2012-06-271-12/+0
| | | | | | | This was an interesting hack, and the local_password module still exists, but until it has a use case and a test case, remove the bypass of password_hash. Andrew Bartlett
* s3-torture: Use static printer for smbd spooler testDavid Disseldorp2012-06-261-1/+9
| | | | | Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Tue Jun 26 18:04:43 CEST 2012 on sn-devel-104
* torture: add test for smbd print job spoolingDavid Disseldorp2012-06-261-0/+73
| | | | | | Clients can print by performing file IO on a printer share, rather than issuing spoolss RPCs. This commit attempts to reproduce bug 8719.
* s4-samldb: do not talloc_steal() the elements of the original requestAndrew Bartlett2012-06-261-4/+10
|
* s4-join: Setup correct DNS configurationAndrew Bartlett2012-06-242-28/+76
| | | | | | | | | This means we do not need to run samba_upgradedns any more. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Sun Jun 24 18:10:10 CEST 2012 on sn-devel-104
* s4-samba_upgradedns: Do not set DNS account for internal serverAndrew Bartlett2012-06-251-32/+32
| | | | | | | The internal DNS server does not need the samba-only NAME-dns account. Andrew Bartlett
* s4-join: Import DNS zones in AD DC joinAndrew Bartlett2012-06-253-20/+59
|
* selftest: Test unix.whoami with kerberos on plugin_s4_dcAndrew Bartlett2012-06-241-16/+4
| | | | | | | | This also tests the comparison with LDAP on anonymous connections and marks this as knownfail, while we investigate the correct behaviour here. Andrew Bartlett
* s4-classicupgrade: Allow DNS backend to be specifiedAndrew Bartlett2012-06-242-6/+12
|
* s4-drepl: Ensure that the op->source does not get deallocated too earlyAndrew Bartlett2012-06-242-9/+25
| | | | | | | | | | | We need to have the struct dreplsrv_partition_source_dsa around until the end of the async op, so we use talloc_reference after carefully checking the callers and making the modifications required. This prevents a crash when replicating partitions in the vampire_dc test after adding DNS replication at join time. Andrew Bartlett
* selftest: schema is not automatically reloaded now so if you modify it you ↵Matthieu Patou2012-06-231-0/+9
| | | | | | | have to reload it Autobuild-User(master): Matthieu Patou <mat@samba.org> Autobuild-Date(master): Sat Jun 23 10:48:13 CEST 2012 on sn-devel-104
* s4-dsdb: operational handle modifyTimeStamp on the CN=aggregate DNMatthieu Patou2012-06-221-1/+37
| | | | | | | | | | | | | | | modifyTimeStamp is a generated attribute, for most object it's generated directly from the whenChanged attribute. But for the CN=aggregate object in the schema we have to handle it in a different way, that's because for this object whenChanged!=modifyTimeStamp (as checked against Windows 2003R2 DCs) instead the modifyTimeStamp reflect the timestamp of the most recently modified and loaded schema object (that is to the one with the highest USN before the schema was reload due to timeout or by the reloadSchemaNow command). Some third party are using this information to know if they have to update their schema cache and also to check that schema updates have been correctly reloaded by the DC, a good example of this behavior is exchange 2010.
* s4-schema: improve the documentation of the dsdb_schema structureMatthieu Patou2012-06-221-4/+6
|